CVE-2022-47459: 
NixOS vulnerability analysis and mitigation

CVE-2022-47459 is a security vulnerability discovered in the WLAN driver that affects various Unisoc hardware platforms and Android operating systems. The vulnerability was disclosed and recorded in December 2022, affecting Android versions 10.0 and 11.0, as well as multiple Unisoc chipsets including S8000, SC7731E, SC9832E, SC9863A, T310, T606, T610, T612, T616, T618, T760, T770, and T820 (NVD).

The vulnerability stems from a possible missing parameters check in the WLAN driver implementation. It has been assigned a CVSS v3.1 Base Score of 5.5 (Medium severity) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The vulnerability is classified as CWE-787 (Out-of-bounds Write) according to the Common Weakness Enumeration system (NVD).

The vulnerability could lead to local denial of service in WLAN services if successfully exploited. This means an attacker with local access could potentially disrupt wireless network functionality on affected devices (NVD).

Unisoc has released security updates to address this vulnerability. Users and manufacturers using affected hardware platforms should ensure their devices are updated with the latest firmware and security patches (Vendor Advisory).